2018-07-16 Fred Gleason <fredg@paravelsystems.com>

* Cleaned up SQL quieries in 'rdadmin/' ensure UTF-8 compatibility.
This commit is contained in:
Fred Gleason
2018-07-16 17:31:07 -04:00
parent 363dbb7878
commit 36269f7725
61 changed files with 1430 additions and 1254 deletions

View File

@@ -30,14 +30,15 @@
#include <qcheckbox.h>
#include <qbuttongroup.h>
#include <rddb.h>
#include <rd.h>
#include <rddb.h>
#include <rdescape_string.h>
#include <rdtextvalidator.h>
#include <add_report.h>
#include <test_import.h>
#include <autofill_carts.h>
#include <edit_svc_perms.h>
#include "add_report.h"
#include "test_import.h"
#include "autofill_carts.h"
#include "edit_svc_perms.h"
AddReport::AddReport(QString *rptname,QWidget *parent)
: QDialog(parent,"",true)
@@ -122,8 +123,8 @@ void AddReport::okData()
tr("You must provide a report name!"));
return;
}
sql=QString().sprintf("select NAME from REPORTS where NAME=\"%s\"",
(const char *)add_name_edit->text());
sql=QString("select NAME from REPORTS where ")+
"NAME=\""+RDEscapeString(add_name_edit->text())+"\"";
q=new RDSqlQuery(sql);
if(q->first()) {
QMessageBox::warning(this,tr("Report Exists"),
@@ -132,8 +133,8 @@ void AddReport::okData()
return;
}
delete q;
sql=QString().sprintf("insert into REPORTS set NAME=\"%s\"",
(const char *)add_name_edit->text());
sql=QString("insert into REPORTS set ")+
"NAME=\""+RDEscapeString(add_name_edit->text())+"\"";
q=new RDSqlQuery(sql);
delete q;
*add_name=add_name_edit->text();